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WHAT IS CLAIMED IS: 

1. A method for reducing bandwidth needed to transmit key update information 
for a plurality of members forming a group, comprising: 

(a) associating a subgroup of said group with a leaf node of a hierarchical tree, 
said leaf node having associated therewith a leaf key common to members of said subgroup, 
wherein upon eviction of at least one member of said group, said leaf key enables said 
members of said subgroup to receive an update message for an interior node above said leaf 
node. 

2. The method of claim 1, wherein said evicted member is not a part of said 
subgroup. 

3. The method of claim 1 , wherein said evicted member is part of said subgroup. 

4. The method of claim 3, wherein said subgroup is a self-repairing group, said 
self-repairing group being operative to update said leaf key independently. 

5. The method of claim 4, wherein said self-repairing group uses a reusable 
power set. 

6. The method of claim 1 , wherein key updates are performed using a logical key 
hierarchy method. 
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7. The method of claim 1 ? wherein key updates are performed using a one-way 
function tree method. 

8. The method of claim 1, wherein key updates are performed using a one-way 
function chain method. 

9. The method of claim 1, wherein said hierarchical tree is a binary tree. 

1 0. The method of claim 1 , wherein said hierarchical tree is a D-ary tree. 

11. A key distribution method, comprising: 

(a) evicting at least one member of a group, said group having a plurality of 
members that share a common node key; 

(b) notifying a plurality of members of said group that said at least one member 
has been evicted; and 

(c) determining a new value for said common node key, wherein said 
determination is capable of being performed independently by said plurality of members of 
said group. 

12. The method of claim 11, wherein said evicting comprises evicting one 
member of said group. 
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13. The method of claim 11, wherein said evicting comprises evicting more than 
one member of said group. 

14. The method of claim 11, wherein said notifying comprises transmitting 
identities of said at least one evicted member. 

15. The method of claim 11, wherein said plurality of members of said group and 
said at least one evicted member form a self-repairing group. 

16. The method of claim 15, wherein said self-repairing group is based on a 
reusable power set. 

17. A key distribution method, comprising: 

(a) grouping a plurality of said members of said group to form a subgroup of said 
group, said subgroup having a common key known only to said members of said subgroup, 
said common key being associated with a common node in a hierarchical tree, said subgroup 
members being operative to independently update said common key upon eviction of one or 
more members of said subgroup; and 

(b) distributing key update messages for said hierarchical tree upon eviction of 
one or more members of said subgroup, wherein said distributed key update messages do not 
update keys associated with nodes below said common node. 
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18. The method of claim 17, wherein said subgroup is based on a reusable power 

set. 

19. The method of claim 17, wherein said key update messages are based on a 
logical key hierarchy method. 

20. The method of claim 17, wherein said key update messages are based on a 
one-way function tree method. 

21. The method of claim 17, wherein said key update messages are based on a 
one-way function chain method. 

22. The method of claim 17, wherein said hierarchical tree is a binary tree. 

23. The method of claim 17, wherein said hierarchical tree is a D-ary tree. 

24. A secret sharing system, comprising: 

a key server that is operative to associate a subgroup of a group having a plurality of 
members with a leaf node of a hierarchical tree, said leaf node having associated therewith a 
leaf key common to members of said subgroup, wherein upon eviction of at least one 
member of said group, said key server uses said leaf key to transmit an update message to 
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said members of said subgroup for a key associated with an interior node above said leaf 
node. 

25 . A computer program product, comprising: 

computer-readable program code for causing a computer to associate a subgroup of a 
group having a plurality of members with a leaf node of a hierarchical tree, said leaf node 
having associated therewith a leaf key common to members of said subgroup, wherein upon 
eviction of at least one member of said group, said leaf key enables said members of said 
subgroup to receive an update message for a key associated with an interior node above said 
leaf node; and 

a computer-usable medium configured to store the computer-readable program codes. 
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